Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/xY6N77gaGhHC96TEYf_319JfP3Y.roa
File: xY6N77gaGhHC96TEYf_319JfP3Y.roa (raw, json)
Hash identifier: pHRv276Dy+Q037IPY/bb8BuMwdfKlhDrevwY2uKsbj0=
Subject key identifier: C5:8E:8D:EF:B8:1A:1A:11:C2:F7:A4:C4:61:FF:F7:D7:D2:5F:3F:76
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 01A0CD125A8F41C8260A910B7C70527F9628
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/xY6N77gaGhHC96TEYf_319JfP3Y.roa
Signing time: Wed 23 Sep 2026 07:02:07 +0000
ROA not before: Wed 23 Sep 2026 07:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 80.250.128.0/24 maxlen: 24
80.250.129.0/24 maxlen: 24
80.250.135.0/24 maxlen: 24
80.250.140.0/24 maxlen: 24
80.250.141.0/24 maxlen: 24
80.250.142.0/24 maxlen: 24
80.250.143.0/24 maxlen: 24
185.255.64.0/24 maxlen: 24
185.255.65.0/24 maxlen: 24
185.255.66.0/24 maxlen: 24
185.255.67.0/24 maxlen: 24
2a00:ecc0:1::/48 maxlen: 48
2a00:ecc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:12:5a:8f:41:c8:26:0a:91:0b:7c:70:52:7f:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Sep 23 07:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c58e8defb81a1a11c2f7a4c461fff7d7d25f3f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:4e:a6:ef:fd:11:45:ba:8a:9b:ca:ae:53:
2c:1a:9d:bb:ea:f0:fc:07:3a:de:9a:50:3f:ae:e4:
97:60:81:76:b4:ce:eb:2b:3f:62:86:35:30:03:90:
28:b7:e3:45:b9:56:3c:06:b3:35:d2:34:1b:42:0f:
8d:eb:26:34:9b:c7:76:35:a5:71:d8:b7:6c:4c:d7:
33:cc:92:55:c5:3f:6d:05:7d:69:52:c2:39:a1:45:
d9:d7:cd:6e:50:2b:d1:1b:59:23:af:ab:81:9e:bd:
2b:33:f1:be:85:fd:57:7c:86:ed:f5:d5:e8:cf:d7:
8c:fe:f3:88:17:ed:78:14:e1:97:6e:ad:55:46:1d:
1e:ac:1a:6b:ef:8c:a3:1c:fe:99:20:79:b0:85:01:
25:40:a0:08:df:e1:8c:40:fe:a6:8f:26:a3:43:0c:
e7:66:54:22:76:ce:22:62:1e:fb:d7:8a:e3:f2:7a:
b7:15:da:19:a8:0d:36:50:6d:40:b1:e2:fd:73:7a:
45:5d:7d:e3:16:fd:10:d4:5e:68:63:bd:83:a3:e5:
6a:1b:41:25:fb:df:ef:b5:99:c7:e2:ae:6c:99:1f:
32:a1:36:02:22:ed:82:7e:3a:26:14:df:94:cc:10:
ec:46:31:04:d5:2c:11:2c:7a:8c:37:fd:22:f0:f8:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:8D:EF:B8:1A:1A:11:C2:F7:A4:C4:61:FF:F7:D7:D2:5F:3F:76
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/xY6N77gaGhHC96TEYf_319JfP3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.128.0/23
80.250.135.0/24
80.250.140.0/22
185.255.64.0/22
IPv6:
2a00:ecc0:1::-2a00:ecc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:42:23:26:40:16:a9:55:f5:fa:38:05:2d:4e:d6:23:9b:7a:
59:64:52:d6:df:cb:cb:da:17:f9:bc:db:b0:db:2d:85:91:52:
95:42:9a:32:6e:e6:b2:b4:fa:11:85:d1:c9:d3:a4:e5:ea:f2:
3e:63:05:99:50:d3:3a:2a:f2:aa:58:87:58:fa:d9:91:d3:a9:
fa:fa:d9:4c:89:db:1f:d3:d6:94:c2:71:4e:3e:1f:14:13:29:
03:fe:f2:c7:25:c0:44:e3:26:c2:41:2a:27:78:6f:6e:dd:c6:
58:be:8d:6d:53:22:43:82:95:af:82:c6:68:6a:cd:04:49:01:
0f:12:40:29:a8:6e:08:06:d9:b8:54:38:b3:2f:5d:9b:ba:86:
7a:a9:f5:d6:b1:73:21:f0:36:11:43:fa:0f:51:b9:d8:c7:36:
99:29:a1:36:c3:45:da:a9:49:5b:a8:55:56:d3:ae:18:50:df:
07:0f:a9:c9:41:96:48:f5:a3:93:d3:c9:eb:96:6c:f1:93:a7:
b6:99:16:2c:8d:cc:46:b5:56:0e:34:21:9f:3c:56:48:de:dc:
84:ea:b7:08:2e:bf:09:03:78:c4:f4:15:a6:8c:44:2a:f0:86:
ab:66:90:33:99:94:99:9c:af:f0:37:83:78:43:de:2f:eb:4b:
dd:be:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:51:37 2026 by rpki-client